← Back to Overview

Privacy Policy

We take your privacy seriously. This policy explains how we handle your data.

Last updated: 19 August 2026 — added Section 6 on usage statistics.

Controller

André Graf
C/O www.impressum-ohne-adresse.de
Wernher-von-Braun-Str. 5-7
69214 Eppelheim, Germany
info@cinegraft.com

1. What Data We Collect

To create an account, we collect only your email address. Your password is stored in securely hashed form by our authentication provider — we never see or store it in plain text. We do not ask for your name, postal address, or any other personal details. As CiGYL is free during the beta, no payment information is collected.

Your actual project data — storyboards, characters, locations, scenes and media — is stored locally on your own device (in your browser and in a project folder you choose). It is never uploaded to our servers.

2. AI Features & Your Own API Keys (BYOK)

AI features are optional and use a "Bring Your Own Key" (BYOK) model. If you choose to use them, you add your own API key for a third-party AI provider (for example Google Gemini, OpenAI, or Anthropic). Your API keys are stored locally and encrypted on your device and are never transmitted to us.

When you use an AI feature, the content required for that request (such as prompts, descriptions or images) is sent directly from your browser to the AI provider you selected, using your own account with that provider. CiGYL does not route, receive, or store this content. That processing is governed by the privacy policy and terms of the respective provider, which you are responsible for reviewing. If you never use AI features, no data is sent to any AI provider.

3. Third-Party Services

We use Netlify to host the website and Supabase to handle account authentication — this stores your email address and your hashed password. Both are GDPR-compliant providers. Your data is not shared with advertising networks, and we never use your content to train AI models.

4. Your Rights

Under the GDPR you have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, contact us at info@cinegraft.com. You may also delete your account, which removes your email address from our authentication provider.

5. Cookies

We only use technically necessary cookies to keep you logged into your account. No third-party tracking cookies are used. Our own usage measurement does not use cookies either — it stores the entries described in Section 6 in your browser’s local storage.

6. Usage Statistics

To understand which parts of CiGYL are actually used, we measure usage on our own infrastructure (Supabase, EU). No third-party analytics service is involved, nothing is shared with advertising networks, and we never record your project content.

For every visit we record: which tool a page belongs to, how long it was actively used, your browser’s window width, and a coarse category describing how you first found CiGYL — for example “youtube”, “google”, “chatgpt.com” or “direct”. We do not record your IP address or the contents of page addresses.

If you are signed in, the measurement also records your account identifier. This is personal data. We need it to answer one question we cannot answer otherwise: how many of our users actually use CiGYL, and for how long — without it, one person using a laptop and a phone would count as two different people. The legal basis is our legitimate interest in understanding and improving our own product (Art. 6(1)(f) GDPR). If you are not signed in, no account identifier is recorded.

Recognition across visits. Your browser stores one entry, cigyl:acq-v1. It holds the coarse source category above and the exact moment of your first visit. Because that moment is recorded to the millisecond, it is precise enough to recognise your browser on later visits, and we do use it that way to count returning browsers. It is not shared with anyone, it is not used to track you on other websites, and you can delete it at any time in your browser’s site-data settings.

The session identifier that groups measurements within one visit lives only in your browser tab and is discarded when you close it.

Your choices. To exclude your browser from measurement entirely, open cigyl.com/?cgtrack=off — the setting is stored in that browser and stays until you clear your browsing data. Visiting /?cgtrack=on reverses it.

Access and deletion. You may ask us at any time what usage data is stored for your account, and ask us to delete it, at info@cinegraft.com. If you delete your account, the associated usage data is deleted automatically along with it.

Imprint  ·  Terms